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United States District Court 

for the 

Northern District of California 



United States of America 
v. 


XUEHUA PENG, a/k/a EDWARD.PENG, 


Defendant(s) 


) 

) 

) Case No. 

) 

) 

) 

) 


CLERK. U.S. DlSr-if ■tpAubt 

NORTH DISTRICT OF CALIFORNIA 


3*19 71585 



CRIMINAL COMPLAINT 


I, the complainant in this case, state that the following is true to the best of my knowledge and belief. 

On or about the date(s) of June 13, 2015 to July 2, 2018 in the county of _ San Mateo _in the 

Northern District of _ California _, the defendant(s) violated: 

Code Section Offense Description 


18U.S.C. §951 


Acting as an Agent of a Foreign Government Without Notice to Attorney 
General of the United States 



This criminal complaint is based on these facts: 
See Affidavit, Attachments, and Exhibits. 


sf Continued on the attached sheet. 


Sworn to before me and signed in my presence. 


Date: 





Complainant’s signature 

Spiro Fokas, Special Agent, FBI 


Printed name and title 



City and state: San Francisco, California Joseph C. Spero, Chief U.S. Magistrate Judge 

Printed name and title 





1 


2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 

25 

26 

27 

28 


AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 

I, Spiro Fokas, a Special Agent with the Federal Bureau of Investigation (“FBI”) in 
Oakland, California, being first duly sworn, hereby depose and state the following: 

I. PURPOSE OF AFFIDAVIT AND CRIMINAL CHARGE 

1. I submit this affidavit in support of a Criminal Complaint that charges Xuehua 
PENG, also known as Edward Peng, with Acting as an Illegal Agent of a Foreign Government. 

2. Specifically, from at least in or about June 2015, up to and including in or about 
June 2018, in the Northern District of California and elsewhere, Xuehua “Edward” PENG 
knowingly acted in the United States as an agent of a foreign government, specifically, PENG 
acted within the United States under the direction and control of the People’s Republic of China 
(“PRC”), without prior notification to the Attorney General, as required by law, in violation of 
18U.S.C. §951. 

H. AGENT QUALIFICATIONS 

3. I am a Special Agent with the FBI, and have been since July 2002. I am currently 
assigned to the Counterintelligence Division within the San Francisco Field Office of the FBI. In 
my capacity as a Special Agent, I have received training in, and my duties include the 
investigation of, violations of federal criminal law, including matters related to acting as an 
illegal agent of a foreign government, espionage, and counterintelligence-related offenses. 

4. The facts in this Affidavit come from my personal observations, my training and 
experience, and information obtained from other agents, law enforcement personnel, and 
witnesses. 

5. Unless otherwise noted, wherever in this Affidavit I recount a statement, 
inclu din g written statements made by another person, that statement is recounted in substance 
and in relevant part. Statements in quotation marks, if any, are based on preliminary translations 
or transcriptions, and review of or interpretations of communications, all of which may be 
subject to revision. 


AFFIDAVIT OF FBI SA SPIRO FOKAS 


1 





1 


2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 

25 

26 

27 

28 


6. This affidavit is intended to show merely that there is sufficient probable cause 
for the requested warrant and does not set forth all of my knowledge about this matter. 

HI. THE PRC’S MINISTRY OF STATE SECURITY USES PENG TO COURIER 

TNEORMATION TO THE PRC 

7. The Government of the PRC conducts intelligence activities using a variety of 
sources, including through its Ministry of State Security (“MSS”). The MSS handles civilian 
intelligence collection for the PRC and is responsible for counterintelligence and foreign 
intelligence, as well as political security. The MSS consists of a central ministry, provincial state 
security departments, and municipal state security bureaus. 

8. Among other things, the MSS and its regional bureaus focus on identifying and 
influencing the foreign policy of other countries, including the United States. The MSS and its 
bureaus seek to obtain information on political, economic, and security policies that might affect 
the PRC, along with military, scientific, and technical information of value to the PRC. The 
MSS and its bureaus are tasked with conducting clandestine and covert human source operations, 
of which the United States is a principal target. 

9. PENG is a naturalized United States citizen. PENG initially entered the U.S. on a 
B-l (temporary business visitor) visa before petitioning as an L-l A (non-immigrant worker) in 
June 2001. PENG became a lawful permanent resident (LPR) on February 10, 2006, following 
his marriage to his then wife. PENG was naturalized on September 27, 2012. 

10. PENG’s immigration file reflects that he has a degree in mechanical engineering 
and is trained in traditional C h i n ese medicine. PENG’s current employment is unknown but I 
believe he works as a tour and sight-seeing operator in the San Francisco area for Chinese 
visitors and students. 

11. There have been no notifications by or for PENG filed with the United States 
under 18 U.S.C. § 951, or any of the corresponding rules and regulations, as of September 2019. 
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12. As of March 2015, the U.S. government began conducting a double agent 
operation targeting the MSS. As part of the operation, a confidential human source (the 
“Source”) 1 has met with MSS intelligence officers, provided them with classified information 
relating to the national security of the United States, and received financial payments in return. 

At all times, the government carefully selected the classified information for the Source and were 
aware of the materials that the Source passed. 

13. In or around March 2015, the Source reported to the FBI a meeting he had in the 
PRC with three individuals. After he returned to the United States, the Source described the 
circumstances and location of the meeting, and the communications that took place with the 
three individuals during the meeting. Based on this information, as well as the subsequent events 
and communications described in detail below, and my training and experience, I believe that the 
three individuals were MSS officers. In this Affidavit, I will identify them as “MSS Officer #1,” 
“MSS Officer #2,” and “MSS Officer #3.” 

14. During the March 25 meeting, MSS Officer #1 advised the Source of a new 
method to pass classified information to the MSS by placing the information on a secure digital 
(SD) card. MSS Officer #1 instructed the Source to then place the SD card in a book, wrap it in a 
bag, mark the package to “Ed,” and leave it at the front desk of a hotel located in Newark, 
California (“Hotel #1”). 2 The MSS intelligence officers told the Source that “Ed” was reliable, 
had famil y in China, and had business dealings in the PRC. The officers further told the Source 
that “Ed” did not know what he was doing. 3 The MSS indicated that Hotel #1 would be used as 


1 As of June 2019, the U.S. government has paid the Source approximately 
$191,141.71 for services and expenses. I believe the Source is reliable because, among other 
reasons, some of the Source's information has been corroborated by other means, and none has 
been demonstrated to be unreliable. 

2 In my training and experience, the method described is known as a “dead drop. 5 
A dead drop is a method of spycraft used to pass items or information between two individuals 
using a secret location, thus not requiring them to meet directly, so as to maintain operational 
security. 

3 As reported by the Source, this statement was ambiguous as to “Ed’s” knowledge, 
and specifically as to what aspect(s) of the operations Ed did not know. Based on the 
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a trial run and that there should be nothing left in the package. The MSS instructed the Source to 
provide the Source's MSS handlers one-week notice prior to dropping the package at the hotel. 

15. In or around June 2015, the Source reported that he/she advised the MSS that 
he/she planned to drop the package at Hotel #1 on or about June 13, 2015. 

16. On June 13, 2015, the FBI instituted physical surveillance in the vicinity of Hotel 
#1. At approximately 8:30 am, the FBI observed the Source entering the main entrance of the 
hotel carrying a package wrapped in a brown paper bag. The Source briefly spoke with the hotel 
receptionist, with whom he/she eventually left the package. The package remained visible on the 
front desk. The Source exited the hotel and departed the area. At approximately 10:10 am, a 
silver Mercedes bearing a specific California license plate pulled into the valet area of Hotel #1. 
An unidentified Asian male exited the vehicle and entered the hotel. A few moments later, the 
Asian male exited the hotel carrying a package that appeared similar to what the Source dropped 
off. A check of the hotel lobby shortly thereafter revealed that the'package was no longer at the 
front desk. 

17. California Department of Motor Vehicle (“DMV”) records reflect that the above- 
mentioned Mercedes was registered to Associate #1, at a specific address in Hayward, 

California. The DMV photo revealed that Associate #1 was a female. A check of the address 
shortly thereafter revealed the silver Mercedes bearing the same license plate number parked in 
the driveway of the address as which it was registered. There were two other vehicles also 
parked at the residence: a Fiat and a Lexus. The Fiat was registered to Associate #1. The Lexus 
was registered to PENG and another individual. 

18. I obtained PENG’s DMV photo and believe that PENG is the person who picked 
up the package at Hotel #1 

circumstances and communications set forth below, including engaging in coded 
communications with individuals in the PRC, participating in surreptitious dead drops, and 
trave lin g to and from the PRC following the dead drops, I believe that “Ed” - who was later 
identified as PENG - had been instructed in spy craft, practiced it, and knew that he was working 
for intelligence operatives of the PRC. 
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19. A search of an o nlin e public database containing public records for PENG 
Xuehua, with a date of birth in September 1963, reflected that PENG was the registered agent of 
U.S. Tour and Travel, located at a specific address in San Francisco, California. 

20. The investigation revealed over 100 individual records in a database for Edward 
Xuehua PENG, all of which were non-immigrant visa applications wherein PENG was listed as 
the U.S. contact. The vast majority of these records listed telephone numbers that were affiliated 
with businesses that shared the same address as U.S. Tour and Travel, PENG’s registered 
business. Based on the above, it is believed that PENG Xuehua also goes by the name Edward. 

B PENG PICKS UP ANOTHER PACKAGE THEN FLIES TO CHINA THE 
NEXT DAY (DEAD DROP #21 

21. On or about October 8, 2015, the Source e-mailed his/her MSS handler 4 to advise 
that the Source would be traveling to San Francisco on October 24, 2015, for some sightseeing. 
According to the Source, this was a coded message indicating that, on October 24,2015, the 
Source would be conducting a dead drop at Hotel #1. On or about October 22, 2015, U.S. 
Customs and Border Protection (CBP) notified the FBI that PENG planned to travel from San 
Francisco on or about October 25, 2015, to Beijing, PRC. 

22. At approximately 8:30 am on October 24, 2015, the Source left a package for 
“Ed” with the receptionist at Hotel #1. 

23. On October 24, 2015, FBI physical surveillance observed PENG enter Hotel #1 at 
approximately 9:24 am and exit shortly thereafter with a package in hand. PENG then drove 
directly to his residence located in Hayward, California. 

24. On October 25, 2015, FBI physical surveillance observed PENG drive to the San 
Francisco International Airport. PENG checked in for a flight at the China Air ticket counter. 
CBP records confirmed that PENG boarded a China Air flight to Beijing, PRC. 


4 Based on information available to the FBI, I believe that MSS Officer #2 handled the 
email communication with the Source. 
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25. Toll records indicate that PENG (using a telephone number ending in 0198) 
received a call fom a specific PRC-based number ending in 7076 on October 15,2015, that 
lasted over five minutes. On October 26, 2015, the day PENG arrived in the PRC with the 
package, PENG received multiple calls from the 7076 phone number, ranging from nine seconds 
to over one minute. The MSS Officers later advised the Source, who subsequently informed the 
FBI, that “Ed” had brought “the chip,” which the Source left during the October 24 dead drop, 
with him on a flight to the PRC. 

26. Based on information available to the FBI, I believe the 7076 phone number 
belongs to MSS Officer # 1 . PENG’s iCloud account contained a contacts.txt file created on 
April 11, 2016, that identified the telephone number ending 7076 stored in a vcard with Chinese 
characters that translate to the first name of MSS Officer #1. Another entry within the 
contacts.txt file includes a telephone number ending 6290, associated with other Chinese 
characters that translate to MSS Officer #l’s full name, with “old phone number” in parentheses. 
This file was created on September 21, 2012 and modified April 11,2016. As noted above, MSS 
Officer #1 was present during a meeting with the Source and two other MSS intelligence 
officers, during which time he provided explicit instructions to the Source regarding how to carry 
out dead drops at Hotel #1. Based on the above facts, the I believe that the caller on October 15, 
2015, instructed PENG to pick up the package on October 24, 2015. 

C. PENG RECEIVES A CALL FROM THE PRC INSTRUCTING HIM TO PICK 
UP A PACKAGE AND RETURN IT TO THE PRC (DEAD DROP #3) 

27. In or around November 2015, the Source reported that during a meeting with 
MSS Officer #1, MSS Officer #2, MSS Officer #3, and MSS Officer #4 in the PRC, they 
provided a new process for making dead drops and collecting payments. MSS Officer #3 
instructed the Source to e-mail MSS Officer #2 when the Source had new material to pass and to 
indicate what day the Source would be in San Francisco. The MSS told the Source to save the 
material on an SD card and place it in the Source's wallet when traveling. On the day of the drop, 
the Source would go to a hotel located in Oakland, California (“Hotel #2”) between 
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approximately 4:00 pm. and 6:00 pm. MSS Officer #3 told the Source to go to the front desk and 
say that the Source's friend, “Ed,” had left a key. “Ed” would have already made a reservation 
and paid for the room. By this time, the Source was to have hidden the SD card in a small 
package like a cigarette pack. The Source was to then go to the assigned room and tape the 
package in the dresser under the television where the Source would also find payment. The MSS 
instructed the Source to stay in the room for approximately thirty minutes and leave sometime 
prior to 6:00 pm. MSS Officer #3 further advised that “they control everything about Ed’s 
company.” If “Ed” were to do anything he was not supposed to, they (the MSS) would “cut him 
off.” 

28. A relative of PENG’s is a part owner of Hotel #2. PENG has also frequently been 
observed at Hotel #2, where he picks up travelers who may be guests at the hotel and/or clients 
of U.S. Tour and Travel. 

29. In or around April 9, 2016, the Source contacted MSS Officer #2 with a coded 
message indicating the Source planned to make a dead drop in San Francisco on or about April 
23,2016. 

30. On April 11, 2016, PENG received a telephone call from MSS Officer #1 calling 
from the 7076 n umb er. 5 PENG indicated that he did not initially recognize the number and MSS 
Officer #1 advised that he had recently changed his number and “from now on you keep a note 
of this one.” PENG advised that he would be returning to China “after May 9 th .” MSS Officer #1 
asked whether it would be possible for PENG to return sooner, but PENG indicated that he could 
not. MSS Officer #1 then indicated “a buddy” would “go to your place on a trip” on April 23. 
MSS Officer #1 advised “when he goes to your place, you will book a room for him.” The 
following exchange then took place: 


5 This call was received on April 12, 2016, at 04:29 universal time, which converts to 
April 11, 2016, at 9:29 pm pacific standard time. By this time, the FBI had obtained a court 
order author izin g it to monitor the content of PENG’s telephone conversations. 
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MSS Officer #1: This way, this way, on the 23rd my buddy will do the same 
thing. Last time the bills, 6 he brought you some medicine pills. He will bring you 
some of the same medicine pills this time, too. 
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PENG: Oh, um, he will bring the same pills, OK, OK. 
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MSS Officer #1: OK, as we spoke last time, when he goes to your place, you will 
book a room for him. 

PENG: Ah. That, that, you, you, you, the money he paid, shall I reimburse him on 
your behalf? 

MSS Officer #1: Umm, right, right, right. Last time I asked you to give him that 
thing. You bring the one to me and you will bring another to me, I will reimburse 
you. 

PENG: Oh. 

MSS Officer #1: Alright? 

PENG: Alright, alright. 

31. Based on my training and experience, I believe that PENG and MSS Off cer #1 
were having a coded discussion about how to handle the next dead drop scheduled for April 23, 
2016, in which PENG would leave money for the Source and retrieve the package left behind. 
MSS Officer #1 indicated that he would reimburse PENG. I believe that “my buddy” refers to 
the Source and “pills” refers to the SD containing the information left for PENG by the Source to 
be delivered to the MSS. 

32. On April 18, 2016, 7 PENG received another call from the same PRC-based 
number associated with MSS Officer #1, advising PENG that there had been a change of plans. 
The following exchange took place between PENG and a person that I believe is MSS Officer 
# 1 : 


6 Based on the rest of the conversation, I believe that the reference to “bills” was actually 

“pills.” 

7 This call was received on April 19, 2016, at 04:28 universal time, which converts to 
April 18, 2016, at 9:28 pm pacific standard time. 
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MSS Officer #1: The educational company on this end has something changed, 
the educational company has something changed about the task. 


PENG: Oh, hmm. 

MSS Officer #1: The educational company wants you soon to come over once. 

PENG: Oh, it wants me to go there, in that case, what do you mean, do you mean 
that it will be late if I go over there on the tenth of the month? 8 Or what? 

MSS Officer #1: It may or may not be late, but let's see if you can come back on 
the 24th. You can fly business class here, after you get here if you are in a hurry 
to go back, you can do that, too. 

PENG: Oh, at that time - 

MSS Officer #1: [Unintelligible] You will be very tired. However, this is for the 
business, and we don't have a better way. 

PENG: Oh. 

MSS Officer #1: Ah. 

PENG: You, you, your these stuff, do you want me to bring them over to you? Or 
are there other matters with the educational company? Or other meetings at the 
educational company, or what? Ah. 

MSS Officer #1: Oh, there are two matters in one, together. 

PENG: Oh, two matters are together in one. 

MSS Officer #1: One thing is that on the 23rd when friends will start to come 
over, if you will be back on the 24th that will be good. 

PENG: Oh, oh. 

MSS Officer #1: That, that you can do it? Alright? If you book the seat now you 
will be able to get business class or the sort. 

PENG: Hmm, right, oh, I have booked the ticket, it is the tenth, the tenth, 
right. Ah. 


2016. 


Based on the previous call noted above, I believe that PENG was referring to May 10, 
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MSS Officer #1: Ah, the tenth, the tenth, can you change it? 

PENG: I decided on the tenth, because on the ninth there is that matter. 

MSS Officer #1: They can't wait for you for that long. 

PENG: Alright, there is no other way then. No other way, then. 

MSS Officer #1: If you come back on the 24th, you can land in Shanghai or in 
Beijing, either city is alright. Beijing, Shanghai, or Guangdong, any of these 
cities will be alright. I will pick you up then. 

PENG: Alright, alright. 

33. Based on my training and experience, I believe that PENG and MSS Officer #1 
were having a coded conversation about the timing of PENG’s delivery to the MSS in the PRC 
of the materials delivered by the Source. I believe “educational company” refers to the MSS and 
MSS Officer #1 was asking PENG to accelerate his trip to the PRC after obtaining the SD card 
from the dead drop. 

34. Approximately the next day, PENG received another call from an intelligence 
officer using the same telephone number associated with MSS Officer #1. PENG advised the 
person on the line, who I believe to be MSS Officer #1, that he was departing on the 24th and 
would arrive in Beijing on the 25th. The intelligence officer offered to pick up PENG from the 
airport. 9 

35. On April 23, 2016, the FBI observed PENG depart his residence at 
approximately 3:20 pm and drive directly to Hotel #2. PENG arrived at the hotel at 
approximately 3:46 pm, carrying a brown shoulder bag. PENG exited the hotel at approximately 
3:54 pm and returned to his residence. 

36. At appro xim ately 4:00 pm, the Source arrived at Hotel #2. The Source told the 
front desk his friend “Ed” had reserved a room for the Source. The hotel staff member gave the 
Source a key. In the room reserved by PENG, the Source found two white envelopes containing 

9 On April 22, 2016, CBP advised that PENG had booked United Airlines flight #888 to 
Beijing, departing April 24, 2016. 
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a total of $20,000 in the dresser under the television. The Source removed the money, taped a 
cigarette pack cont ainin g an SD card under the top of the dresser drawer, and departed Hotel #2. 

37. At approximately 6:13 pm, the FBI observed PENG departing his residence and 
driving back to Hotel #2. PENG entered Hotel #2 at approximately 6:40 pm, carrying the brown 
shoulder bag. PENG exited the hotel at approximately 6:54 pm and returned to his residence. 

38. On April 24, 2016, the FBI observed PENG depart his residence at approximately 
8:34 am en route to the San Francisco International Airport. CBP confirmed that PENG boarded 
United Airlines flight #888 to Beijing. 

D. DEAD DROPS MOVE TO GEORGIA (HEAD DROP #4) 

39. In or around May 2017, the Source met with MSS Officer #2 and MSS Officer 
#3 in Europe and confirmed two dead drops scheduled to take place on or about July 1, 2017, 
and on or about September 2, 2017, at a hotel located in Columbus, Georgia (“Hotel #3”). The 
MSS told the Source during the meeting that the Source would collect $20,000 at the first dead 
drop and another $20,000 at the second. The MSS instructed the Source to leave an SD card 
containing classified information during the second dead drop. The planned dead drops were 
described in a similar fashion to those discussed above, which were conducted in the Northern 
District of California. More specifically, the Source was directed to arrive at Hotel #3 after 9:30 
am and leave before 11:00 am. The Source was told that, prior to the Source’s arrival, “Ed” 
would leave money in the room and a key at the front desk. The Source was instructed to 
approach the front desk and ask for a key left by "my friend Ed." After the meeting, the Source 
met briefly with MSS Officer #1, who handed the Source a cigarette box that contained $20,000. 

40. During this time, the FBI observed a decrease in the number of telephone calls 
between the MSS handlers and PENG. In earlier calls, they had discussed utilizing encrypted 
chat platfo rms to communicate, and I believe that this explains, at least in part, the decrease in 
telephone conversations. 

41. On December 28, 2016, PENG received an email from Priceline.com confirming 
his purchase of round trip flights from San Francisco, California, to Atlanta, Georgia, on January 
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6-8, 2017. On that same day, he also received an email from Priceline.com confirming his 
reservation at Hotel #3, checking in on January 6, 2017, and checking out the next day. On 
January 6, 2017, PENG received a call from an unknown male who PENG advised that he was in 
Atlanta picking up a rental car. PENG traveled to the PRC again on January 28, 2017. Based on 
my training and experience, I believe PENG conducted this visit to Hotel #3 to confirm it was a 
suitable location for further dead drops from the Source, who had complained to the MSS that 
San Francisco was too far. 

42. On or about June 30, 2017, the FBI learned that PENG had checked into the hotel. 
On or about July 1, 2017, the FBI observed PENG depart Hotel #3 at approximately 8:44 am. At 
approximately 10:00 am, the Source arrived at Hotel #3 and retrieved a key left by “Ed” from the 
front desk, but was first asked to present identification. The Source then went to the assigned 
room and retrieved an envelope from the dresser under the television that contained $20,000. 

The Source departed Hotel #3 shortly thereafter. The FBI observed PENG returning to Hotel #3 
at approximately 11:34 am. PENG departed Hotel #3 again at 11:54 am and was observed 
driving towards Atlanta, Georgia. 

E. PENG RECEIVES INSTRUCTIONS FOR THE SECOND DEAD DROP IN 
COLUMBUS. GEORGIA (DEAD DROP # 5 ) 

43. On or about August 22, 2017, the Source met with MSS Officer #1, MSS Officer 
#2, and MSS Officer #4 10 in the PRC and relayed that the dead drop previously scheduled for on 
or about September 2, 2017, would need to be rescheduled to on or about September 9, 2017. 

44. On or about August 23, 2017, PENG received a phone call from a male in Beijing 
from a telephone number ending 9102. Based on the content of the call and my training and 
experience, I believe the caller was an MSS intelligence officer. Specifically, I believe that that 


10 The Source reported that he encountered another official in his August 2017 trip to the 
PRC. Based on the Source’s description of the location, circumstances, and content of the 
meeting, as well as the new official’s affiliation with MSS Officer #1 and # 2 ,1 believe that he 
was also an MSS officer and refer to him in this Affidavit as MSS Officer #4. 
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the caller was MSS Officer #1. After exchanging some brief pleasantries, the intelligence officer 
and PENG had the following conversation: 11 

MSS Officer #1: Uhin—uhm, is it okay to talk on the phone? 

PENG: Yes, yes. 

MSS Officer #1: Okay. Well, it’s that, Uh, last time the guaranty/sponsor matter- 
PENG: Uhm. 

MSS Officer #1: -the guaranty/sponsor matter, didn’t I say not to go for the time 
being? 

PENG: Yes, uhm... 

MSS Officer #1:1 had enough at the time. But, uh, on September 9th [you] may 
have to go there and buy it. 

PENG: Sure, sure, sure, uhm. 

MSS Officer #1: September 9th, so you ... when the time comes, September 9th . 
.. once I co nfir m it... September 9th, once it is done, you will directly deliver it 
to me. 

PENG: Sure, yes, sure. 

MSS Officer #1: Deliver it directly, so, directly . . . then there is no need to go 
back, just deliver it to me directly. 

PENG: Uhm, of course- of course. But- 

MSS Officer #1: All right, uhm... 

PENG: —Will still come back— 

MSS Officer #1: Uhm... 

PENG: -Sure. September 9th is, which day of the week is it? 
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11 Early in this call, PENG wonders why he was receiving a call from a Beijing number 
and the person that I believe to be MSS Officer #1 responds “Uhm, uh, uh, uhm, it s nothing 
it’s nothing,.. Uh, I’m using-using - this phone to talk.” This suggests that PENG knows the 
caller but did not recognize the number. 
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MSS Officer #1: Uhm, uhm, you put down one, all right? 

PENG: Uhm, sure, sure, sure, sure. 

MSS Officer #1: Uhm, uhm, put down one is good enough, okay? I’m afraid that 
two may be ... it may be too much. Will buy more later if they are good, all 
right? 

PENG: Sure, good, good, uhm. 

MSS Officer #1: Good, good, good. 

PENG: I will. 

MSS Officer #1: Uhm, then, anyway, you know the rest already. Do like before, 
all right? 

PENG: I know, I understand. 

MSS Officer #1: Good, good, good. Thank you for your hard work. Uhm, all right 
then. Goodbye! 

45. Based on my training and experience, I believe that PENG and MSS Officer #1 
were having a coded conversation in which MSS Officer #1 instructed PENG to make plans to 
service a dead drop on September 9, 2017, and deliver the package directly to him. The 
intelligence officer that I believe to be MSS Officer #1 told PENG to “put down one” and “[w]ill 
buy more later if they are good.” I believe that MSS Officer #1 was instructing PENG to leave 
“one”—meaning $10,000—instead of “two”—meaning $20,000, which is how much PENG left 
for the Source during the July 2017 dead drop. 

46. Later on the same day as the call with MSS Officer #1, PENG received an email 
from Priceline.com confirming his reservation at Hotel #3, checking in on September 8, 2017, 
for one night. That same day, PENG received another email from Priceline.com confirming his 
flight from San Francisco to Atlanta on September 8, 2017, returning the next day. The 
reservation also included a rental car. 
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47. On August 24, 2017, PENG received an email from Hainan Airlines indicating 
that he had purchased a ticket for travel from San Jose, California, to Beijing for September 10, 
2017, returning on October 6, 2017. 

48. On or about August 24, 2017, the Source met with MSS Officer #1, MSS Officer 
#2, MSS Officer #3, and MSS Officer #4 in the PRC and received confirmation that the dead 
drop had been rescheduled for September 9, 2017. The Source was told he/she would receive 
$10,000 during the next drop. During this meeting, the Source also mentioned to MSS Officer #1 
that during the previous drop in July, there was a problem with the front desk of the hotel 
because the Source had to show his/her identification in order to obtain the key left by “Ed.” 

49. On September 4, 2017, PENG received a phone call from a PRC telephone 
number ending 2102. Based on my training and experience, the person who made the telephone 
call was an intelligence officer for the MSS. Based on voice similarities to the intelligence 
officer who previously called PENG, the I believe that the intelligence officer is MSS Officer #1. 
The following conversation took place: 

MSS Officer #1: Hmm, my friend, when he goes to pick up that thing, is he 
supposed to say that he is Ed? Or what? 

PENG: What? The signal was not good. I didn’t get it. Uh. 

MSS Officer #1: Is he supposed to say that he is Ed? When he picks up the thing, 
will the clerk ask for his ID card? 

PENG: The clerk should not ask for it as I did not mention his name. The way I 
put it is that I’ll say that I am Ed. I will place the thing there. So long as he can 
mention my name Ed, he will pick up the thing. 

MSS Officer #1: Then you mean that the person to pick up the thing also uses the 
same name? 

PENG: You mean that you want me to say that the person to pick up the tiling is 
also called Ed, right? 

MSS Officer #1: Right, in this way you make the arrangement for the person to 
pick the thing up and he will not have to show his ID. That will be the best 
because he feels that... it is not a good idea. 
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PENG: Of course. If I write down my name Ed on it and I mention that he will 
pick up the thing with my name on it, then he won’t need to look at anything and 
then the issue of looking would not exist. 

50. I believe that MSS Officer #1 was referring to the conversation the Source had 
with MSS Officer #1 on August 24, 2017, about the previous incident involving the Source 
having to show his/her identification to obtain the key left by “Ed.” 

51. On or about September 3,2017, PENG called Associate #3 and advised that he 
would be meeting with someone later that evening to receive $10,000 cash. Shortly thereafter, 
PENG called Associate #4 and advised that he would be meeting with someone at 9:00 pm that 
evening at Hotel #2 (which is partially owned by PENG’s relative). PENG did not identify the 
person he would be meeting with but explained that this person would give PENG $10,000 in 
U.S. currency and PENG would provide the same amount in Chinese currency (Renminbi) in 
return. 

52. I believe that the above calls were in reference to the $10,000 that PENG was 
instructed to leave for the Source during the dead drop on September 9, 2017. Furthermore, I 
believe that PENG was attempting to acquire $10,000 in the above manner so as to obfuscate the 
source of the money so it would not tie directly back to PENG. Based on my training and 
experience, acquiring money in this way is a method employed by the MSS to pay their sources 
in the U.S. without having the funds transit through the U.S. banking system. 

53. On September 8,2017, the FBI observed PENG deplaning his scheduled flight in 
Atlanta. PENG then proceeded to the rental car counter, eventually getting into a dark sedan and 
driving to Hotel #3 in Columbus. 

54. On September 9,2017, PENG taped a white envelope to the top of the uppermost 
drawer of the TV stand in a room at Hotel #3. PENG checked the drawer several times thereafter 
to ensure that the envelope remained in place. At approximately 8:20 am, PENG departed the 
hotel and drove to a nearby shopping center where he visited several stores. 

55. The video contained in the DVD attached to this Affidavit as Exhibit 1 (a) was 
taken by a video camera installed by the FBI in the Columbus, Georgia-hotel room PENG used 
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for dead drop #5 and shows PENG taping an envelope to the underside of a shelf in the 
dresser/TV stand in the room. 

56. After taping the money in the dresser, PENG left the room. At approximately 
9:40 am, the Source entered the hotel room and removed the envelope from the top 

drawer. Shortly thereafter, the Source taped an SD card to the top of the uppermost drawer. The 
Source departed the room at approximately 10:00 am. It was later determined that the envelope 
contained $10,000. 

57. At approximately 11:30 am, PENG returned to the hotel room and was observed 
removing the SD card from the top of the uppermost drawer of the TV stand. PENG departed the 
hotel shortly thereafter and went to a nearby restaurant. At approximately 12.30 pm, PENG 
departed the restaurant and drove to the Atlanta airport, where PENG was observed boarding a 
flight. The FBI believes that PENG likely boarded his scheduled flight back to San Francisco. 

58. The video contained in the DVD attached to this Affidavit as Exhibit 1 (b) was 
taken by the FBI in the hotel room PENG used for dead drop #5 and depicts PENG removing the 
SD card from the dresser where the Source left it. 

59. On September 10,2017, the FBI observed PENG’s spouse dropping PENG off at 
the San Jose International Airport, where PENG checked in for a flight. CBP later confirmed that 
PENG boarded the flight to Beijing as planned. PENG was scheduled to return to the United 
States on October 6, 2017. 

F. THIRD DEAD DROP IN COLUMBUS. GEORGIA (DEAD DROP #6) 

60. In or around May 2018, the MSS relayed a signal to the Source instructing the 

Source to conduct a dead drop on or about June 30, 2018. 

61. On June 17, 2018, PENG received an email from Priceline.com confirming his 
flight from Oakland, California, to Atlanta, Georgia, departing June 28, 2018, and returning June 
30, 2018. The email also contained a reservation for a rental car. PENG received an email from 
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Priceline.com on June 26, 2018, confirming his reservation at Hotel #3, checking in on June 29, 
2018, and checking out the next day. 

62. On June 20,2018, PENG received a phone call from a male using the telephone 
number ending 2102, which is the same number PENG received a call from on September 4, 
2017, by a person that I believe is MSS Officer #1. Based on my training and experience, the 
person who made the telephone call was an intelligence officer for the MSS. Based on voice 
similarities, I believe that the caller on June 20, 2018, was MSS Officer #1. The following 
conversation took place: 

MSS Officer #1: About your plan, have you made up your mind yet? 

PENG: I, I will go there on the 28th of the month. 

MSS Officer#!: Oh. 
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PENG: Ah, ah, ah. 

MSS Officer #1: Oh. 

PENG: I expect to stay there for two weeks. 12 
MSS Officer #1: When will you come back? 

PENG: Ahh, as I see it right now, the ticket, it should be around the 2nd of the 
month, the 2nd of the month, the 2nd. 

MSS Officer #1: Oh, good, good, good. 

PENG: Because I will be returning in the evening on the 30th and arrive at home 
in the early morning on the 1st. 

MSS Officer #1: Oh, oh. 

PENG: Because this flight is often delayed, I, I must be prudent and 
conservative. That is why I will book the flight of the 2nd, the 2nd and I will 
arrive in Beijing on the 3rd. 


12 I believe that PENG likely meant two days, as that was the duration of his trip to 
Georgia. 
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MSS Officer #1: If I will be there, we may meet there. 

PENG: Good, that will work. You wait for me there. Ah.. Not decided yet? 

MSS Officer #1:1 should be there. I don't expect many things then, I do want to 

meet you there and then. 

PENG: Yes, yes, yes, yes, yes. I have a few, a number of, things there. 

MSS Officer #1: Good, good, good, good, good. 

PENG: You still make purchases here and there. I will make purchases here. So 

you will make purchases here and there, so that we will have the rest of them. 

MSS Officer #1:1 will purchase two so that we will have them matched up. You 

bring two. 

PENG: Alright, alright, I will bring two to you, alright. 

MSS Officer #1:1 will talk with you after you get back. 

PENG: Alright, alright. 

MSS Officer #1: Good, good, good. 

PENG: Good, good. 

MSS Officer #1: Good. 

63. . Based on my training and experience, I believe that this was a coded telephone 
call between PENG and the person believed to be MSS Officer #1 regarding PENG’s planned 
trip to Georgia in June 2018 to retrieve another package on behalf of the MSS and PENG’s 
return to Beijing in early July. The reference to “you bring two” is believed to be an instruction 
to PENG advising him to leave $20,000 in the dead drop. 

64. On June 29, 2019, the FBI observed PENG arrive at the rental car office located 
near the Hartsfield-Jackson Atlanta Airport. PENG rented a car and drove to Hotel #3. 

65. On June 30,2018, PENG taped a white envelope to the top of the uppermost 
drawer of the television stand in his room at Hotel #3. PENG checked the drawer several times 
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thereafter to ensure that the envelope remained in place. At approximately 8:30 am, PENG 
departed the hotel and drove to a nearby shopping center where he visited several stores. 

66. The video contained in the DVD attached to this Affidavit as Exhibit 2(a) was 
taken by the FBI in the hotel room PENG used for dead drop #6 depicts PENG leaving money 
for the Source. 

67. At approximately 9:40 am, the Source entered the hotel room and removed the 
envelope from the top drawer of the television stand. The Source then taped an SD card to the 
top of the uppermost drawer and departed the hotel room shortly thereafter. It was later 
determined that the envelope contained $20,000. 

68. At approximately 11:30 am, PENG returned to the hotel room and removed the 
SD card from the top of the uppermost drawer of the television stand. PENG departed the hotel, 
shortly thereafter and went to a nearby restaurant. At approximately 12:50 pm, PENG departed 
the restaurant and drove to the Atlanta airport. 

69. The video contained in the DVD attached to this Affidavit as Exhibit 2(b) was 
taken by the FBI in the hotel room PENG used for dead drop #6 depicts PENG picking up the 
SD card left by the Source. 

70. On July 2, 2018, PENG’s spouse dropped PENG off at the San Francisco 
International airport, where he boarded a flight for Beijing. 

// 

// 

// 

// 
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IV. CONCLUSION 

71. Based on the foregoing, there is probable cause to believe that Xuehua PENG, 
also known as Edward PENG, acted in the United States as an agent of the People s Republic of 
China, specifically the MSS, without prior notification to the Attorney General, as required by 
law, in violation of 18 U.S.C. §951. Accordingly, I request the Court to issue the attached 
Cr imin al Complaint and Arrest Warrant. 

I declare under penalty of perjury that the above is true and correct to the best of my 
knowledge and belief. 


Sworn to and subscribed before me 
this 2 H bU day of September, 2019. 



Spiro Fokas 
Special Agent 

Federal Bureau of Investigation 



THE HONORABLEdfUSEPH C. SPERO 
CHIEF UNITED^t ATES MAGISTRATE JUDGE 
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